Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
File:                     dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft (raw, json)
Hash identifier:          Sgx/V2LCEhSSQ12DWS+AvT4mJcHakEz9kzBbVRrQ4Lk=
Subject key identifier:   F7:0C:FE:93:1C:54:FB:D0:61:13:BB:D0:13:04:F6:DB:6D:15:8E:A5
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Certificate issuer:       /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial:       0199DF299CBB042A53E4479D80AFC985F1C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
Manifest number:          16D6
Signing time:             Mon 13 Oct 2025 20:01:10 +0000
Manifest this update:     Mon 13 Oct 2025 20:01:10 +0000
Manifest next update:     Tue 14 Oct 2025 20:01:10 +0000
Files and hashes:         1: 0gep-REqlULawvS-x4T-wK7S7GA.roa (hash: FGJj6xlXiADWsaDG4OrAocOgRs0lC02TjnV2BjtgY1E=)
                          2: Q1XUBD_s1D_F0SITgp44J4I9gSg.roa (hash: w5981UwpX34Mt96TzsvSXFggOvVKomyq+xMftlqjtX8=)
                          3: dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl (hash: IzVIFpuQRa86TrHfzq+PPyMEn6UsFJ4xdy6uQiVlf4Y=)
                          4: wN2TdkfIPR3J0gvl0DtgYNB7D9w.roa (hash: NqvC6VGS3DEUxOPhIZWiZLcfYzHuOJ6bd3D616XpZos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 Oct 2025 20:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:df:29:9c:bb:04:2a:53:e4:47:9d:80:af:c9:85:f1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
        Validity
            Not Before: Oct 13 20:01:10 2025 GMT
            Not After : Oct 14 20:01:10 2025 GMT
        Subject: CN=f70cfe931c54fbd06113bbd01304f6db6d158ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:e0:d4:57:cf:a4:e1:56:9f:52:5b:d2:c2:
                    d6:a9:83:65:06:e7:23:29:71:f2:ce:7c:65:57:62:
                    a8:88:61:ee:b2:cd:1b:85:f3:bc:b7:15:18:ff:81:
                    04:24:23:e3:ca:25:fa:5c:08:d0:12:e6:36:b8:6c:
                    cc:93:d6:79:d6:90:6f:ff:67:12:bc:33:34:56:83:
                    c7:d1:3b:a0:ed:50:ab:7c:3d:a1:22:80:55:f8:95:
                    5d:7f:16:74:22:79:db:61:b4:90:1b:a3:8f:08:6b:
                    7a:37:85:73:ce:71:f2:b5:2f:54:52:b5:b3:b4:5c:
                    42:64:71:45:f6:dd:8f:2b:fe:9e:b1:a3:f9:c3:c9:
                    5c:ea:01:d2:fe:73:d5:83:0a:32:cf:d5:eb:46:d2:
                    4a:79:0a:92:46:77:df:7b:43:e3:9d:5f:47:54:74:
                    6c:c0:38:64:66:56:0b:29:0f:3e:7c:5b:26:5d:15:
                    2b:95:b7:b6:77:b5:99:ef:ae:c6:b3:6f:83:13:bb:
                    ca:06:4d:43:6d:f8:87:cd:f2:8a:90:cc:52:bc:09:
                    6a:b7:b8:a2:2b:5c:17:51:9f:67:2a:b1:32:e9:37:
                    71:60:fe:09:15:f4:7a:97:eb:3f:47:47:02:97:92:
                    14:16:e5:f2:5d:eb:b3:1b:c2:09:48:09:62:50:ba:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0C:FE:93:1C:54:FB:D0:61:13:BB:D0:13:04:F6:DB:6D:15:8E:A5
            X509v3 Authority Key Identifier:
                keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fe:ea:3d:94:2e:9c:c3:07:be:52:d1:e7:9f:d5:fd:4d:1d:
         f0:6e:13:84:22:a4:ce:b2:33:90:78:e6:9e:3e:7f:33:fd:3e:
         44:7a:15:be:f7:34:7b:d5:73:68:c2:99:91:0a:72:b3:49:3d:
         bd:ce:91:f9:34:8a:7a:a1:7d:a6:ba:13:cc:ca:ee:0d:80:c6:
         ce:8c:f7:7f:8d:6d:4d:34:c0:54:80:47:cb:fc:f9:99:f6:df:
         e1:0c:1a:3f:01:f9:e4:2c:0c:70:b9:1e:58:1f:90:a2:fc:c1:
         d0:b5:ea:bf:94:5b:fe:e3:50:5b:90:ee:1f:f5:c4:f1:e5:28:
         be:94:a2:db:2f:ac:a8:5c:11:84:2e:e8:d4:be:65:81:f2:03:
         aa:ba:37:b7:28:3f:b3:ce:f3:72:10:67:cd:a1:c5:a0:dd:71:
         23:12:b8:09:df:09:4a:67:45:33:11:ce:3f:8c:c8:1f:7a:c8:
         e9:42:10:88:33:af:32:50:a8:78:a6:62:ca:b9:d8:70:09:50:
         18:0f:d7:53:74:93:51:25:e9:02:76:6a:2a:5c:da:48:9a:8d:
         f5:b5:c2:da:b4:4a:39:39:71:30:68:93:2d:0f:92:a8:0c:03:
         fb:17:bc:86:ae:b1:d1:2d:ec:12:d9:92:a1:b7:79:d9:52:a4:
         8a:41:01:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnfKZy7BCpT5EedgK/JhfHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODk2YzU0NGI0NjFkOGIwNjJlZmY5ZTNkMmMyOWNkM2Nj
OTYwZWMwHhcNMjUxMDEzMjAwMTEwWhcNMjUxMDE0MjAwMTEwWjAzMTEwLwYDVQQD
EyhmNzBjZmU5MzFjNTRmYmQwNjExM2JiZDAxMzA0ZjZkYjZkMTU4ZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/jg1FfPpOFWn1Jb0sLWqYNlBucj
KXHyznxlV2KoiGHuss0bhfO8txUY/4EEJCPjyiX6XAjQEuY2uGzMk9Z51pBv/2cS
vDM0VoPH0Tug7VCrfD2hIoBV+JVdfxZ0InnbYbSQG6OPCGt6N4VzznHytS9UUrWz
tFxCZHFF9t2PK/6esaP5w8lc6gHS/nPVgwoyz9XrRtJKeQqSRnffe0PjnV9HVHRs
wDhkZlYLKQ8+fFsmXRUrlbe2d7WZ767Gs2+DE7vKBk1DbfiHzfKKkMxSvAlqt7ii
K1wXUZ9nKrEy6TdxYP4JFfR6l+s/R0cCl5IUFuXyXeuzG8IJSAliULph8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcM/pMcVPvQYRO70BME9tttFY6lMB8GA1UdIwQY
MBaAFHSJbFRLRh2LBi7/nj0sKc08yWDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYzIyYTktZjg3MS00MDBjLThmY2Yt
Y2YxNzQwODIzNDAwLzEvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYzIyYTktZjg3MS00MDBjLThmY2YtY2YxNzQwODIzNDAw
LzEvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHv7qPZQu
nMMHvlLR55/V/U0d8G4ThCKkzrIzkHjmnj5/M/0+RHoVvvc0e9VzaMKZkQpys0k9
vc6R+TSKeqF9proTzMruDYDGzoz3f41tTTTAVIBHy/z5mfbf4QwaPwH55CwMcLke
WB+QovzB0LXqv5Rb/uNQW5DuH/XE8eUovpSi2y+sqFwRhC7o1L5lgfIDqro3tyg/
s87zchBnzaHFoN1xIxK4Cd8JSmdFMxHOP4zIH3rI6UIQiDOvMlCoeKZiyrnYcAlQ
GA/XU3STUSXpAnZqKlzaSJqN9bXC2rRKOTlxMGiTLQ+SqAwD+xe8hq6x0S3sEtmS
obd52VKkikEBAQ==
-----END CERTIFICATE-----
Generated at Tue Oct 14 04:02:12 2025 by rpki-client